Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-06 13:58:50.775 00:00:10.327 TCP 23.104.0.1:33960 -> 1.101.0.1:3000 11 1507 1 2025-08-06 13:59:09.540 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 13:59:09.618 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 13:59:38.000 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:55804 10 6452 1 2025-08-06 13:59:51.140 00:00:10.366 TCP 23.104.0.1:35948 -> 1.101.0.1:3000 11 1507 1 2025-08-06 13:55:07.202 00:06:00.746 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-06 14:00:38.216 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41980 10 6452 1 2025-08-06 14:00:51.544 00:00:10.364 TCP 23.104.0.1:59522 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:01:38.431 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54112 10 6452 1 2025-08-06 14:01:51.955 00:00:10.364 TCP 23.104.0.1:51838 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:02:38.643 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44154 10 6452 1 2025-08-06 14:02:52.360 00:00:10.362 TCP 23.104.0.1:58098 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:03:38.857 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:36474 10 6452 1 2025-08-06 14:03:52.767 00:00:10.372 TCP 23.104.0.1:38416 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:04:09.607 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 13:59:07.203 00:06:00.750 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-06 14:04:09.598 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 14:04:39.029 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35142 10 6452 1 2025-08-06 14:04:53.183 00:00:10.361 TCP 23.104.0.1:35344 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:05:39.238 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39072 10 6452 1 2025-08-06 14:05:53.582 00:00:10.327 TCP 23.104.0.1:57814 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:06:39.411 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60166 10 6452 1 2025-08-06 14:06:53.946 00:00:10.364 TCP 23.104.0.1:57574 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:02:07.206 00:06:00.750 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-06 14:07:39.626 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34250 10 6452 1 2025-08-06 14:07:54.346 00:00:10.327 TCP 23.104.0.1:59954 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:08:39.839 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:58776 12 10367 1 2025-08-06 14:08:54.724 00:00:10.455 TCP 23.104.0.1:44342 -> 1.101.0.1:3000 15 1926 1 2025-08-06 14:09:09.514 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 14:09:10.379 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 14:09:40.115 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:50312 10 6452 1 2025-08-06 14:09:55.220 00:00:10.322 TCP 23.104.0.1:54680 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:10:40.306 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48134 10 6452 1 2025-08-06 14:10:55.579 00:00:10.328 TCP 23.104.0.1:58194 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:06:07.203 00:06:00.755 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-06 14:11:40.519 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58318 10 6452 1 2025-08-06 14:11:55.938 00:00:10.340 TCP 23.104.0.1:52534 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:12:40.738 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57042 10 6452 1 2025-08-06 14:12:56.313 00:00:10.361 TCP 23.104.0.1:57686 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:13:40.952 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:42018 12 10365 1 2025-08-06 14:14:09.727 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 14:14:09.878 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 14:13:56.711 00:00:10.461 TCP 23.104.0.1:32802 -> 1.101.0.1:3000 15 1926 1 2025-08-06 14:09:07.205 00:06:00.752 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-06 14:14:41.206 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:53434 10 6452 1 2025-08-06 14:14:57.214 00:00:10.363 TCP 23.104.0.1:41104 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:15:41.454 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:48432 10 6452 1 2025-08-06 14:15:57.614 00:00:10.369 TCP 23.104.0.1:53774 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:16:41.628 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39202 10 6452 1 2025-08-06 14:16:58.022 00:00:10.321 TCP 23.104.0.1:48306 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:17:41.841 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37712 10 6452 1 2025-08-06 14:13:07.205 00:06:00.756 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-06 14:17:58.380 00:00:10.362 TCP 23.104.0.1:56330 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:18:42.083 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42356 10 6452 1 2025-08-06 14:19:10.382 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 14:18:58.775 00:00:10.369 TCP 23.104.0.1:60880 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:19:10.293 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 14:19:42.294 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36212 10 6452 1 2025-08-06 14:19:59.185 00:00:10.364 TCP 23.104.0.1:58074 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:20:42.517 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52480 10 6452 1 2025-08-06 14:20:59.588 00:00:10.367 TCP 23.104.0.1:56476 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:16:07.208 00:06:00.751 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-06 14:21:42.731 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40682 10 6452 1 2025-08-06 14:21:59.996 00:00:10.346 TCP 23.104.0.1:56492 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:22:42.952 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:59620 12 6556 1 2025-08-06 14:23:00.401 00:00:10.377 TCP 23.104.0.1:50358 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:23:43.193 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55344 10 6452 1 2025-08-06 14:24:10.025 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 14:24:00.809 00:00:10.363 TCP 23.104.0.1:47492 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:24:10.041 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 14:24:43.414 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36722 10 6452 1 2025-08-06 14:20:07.205 00:06:00.758 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-06 14:25:01.221 00:00:10.360 TCP 23.104.0.1:44250 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:25:43.628 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48370 10 6452 1 2025-08-06 14:26:01.623 00:00:10.364 TCP 23.104.0.1:43070 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:26:43.796 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54128 10 6452 1 2025-08-06 14:27:02.029 00:00:10.378 TCP 23.104.0.1:45018 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:27:44.013 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60700 10 6452 1 2025-08-06 14:23:07.208 00:06:00.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-06 14:28:02.444 00:00:10.330 TCP 23.104.0.1:42712 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:28:44.191 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47230 10 6452 1 2025-08-06 14:29:10.398 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 14:29:10.190 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 14:29:02.801 00:00:10.340 TCP 23.104.0.1:33308 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:29:44.402 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:50420 10 6452 1 2025-08-06 14:30:03.179 00:00:10.369 TCP 23.104.0.1:37972 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:30:44.573 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44322 10 6452 1 2025-08-06 14:31:03.590 00:00:10.361 TCP 23.104.0.1:38656 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:31:44.786 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50020 10 6452 1 2025-08-06 14:27:07.207 00:06:00.762 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-06 14:32:03.988 00:00:10.369 TCP 23.104.0.1:41358 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:32:45.006 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41492 10 6452 1 2025-08-06 14:33:04.395 00:00:10.371 TCP 23.104.0.1:46092 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:33:45.223 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55862 10 6452 1 2025-08-06 14:34:10.462 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 14:34:10.159 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 14:34:04.800 00:00:10.366 TCP 23.104.0.1:60536 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:34:45.445 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56258 10 6452 1 2025-08-06 14:30:07.210 00:06:00.755 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-06 14:35:05.203 00:00:10.366 TCP 23.104.0.1:41522 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:35:45.659 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50456 10 6452 1 2025-08-06 14:36:05.608 00:00:10.369 TCP 23.104.0.1:39678 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:36:45.878 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41240 10 6452 1 2025-08-06 14:37:06.015 00:00:10.362 TCP 23.104.0.1:34380 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:37:46.111 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53580 10 6452 1 2025-08-06 14:38:06.414 00:00:10.365 TCP 23.104.0.1:34598 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:38:46.322 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40520 10 6452 1 2025-08-06 14:39:10.110 00:00:00.044 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 14:39:10.319 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 14:34:07.209 00:06:00.764 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-06 14:39:06.814 00:00:10.369 TCP 23.104.0.1:51168 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:39:46.533 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53204 10 6452 1 2025-08-06 14:40:07.225 00:00:10.363 TCP 23.104.0.1:48854 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:40:46.745 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50082 10 6452 1 2025-08-06 14:41:07.630 00:00:10.383 TCP 23.104.0.1:57882 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:41:46.955 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:55316 12 6556 1 2025-08-06 14:37:07.211 00:06:00.760 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-06 14:42:08.059 00:00:10.365 TCP 23.104.0.1:35678 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:42:47.186 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52766 10 6452 1 2025-08-06 14:43:08.464 00:00:10.362 TCP 23.104.0.1:59538 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:43:47.362 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49762 10 6452 1 2025-08-06 14:44:10.419 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 14:44:10.442 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 14:44:08.862 00:00:10.328 TCP 23.104.0.1:36432 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:44:47.593 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:35768 10 6452 1 2025-08-06 14:45:09.227 00:00:10.357 TCP 23.104.0.1:36566 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:45:47.865 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:42036 10 6452 1 2025-08-06 14:41:07.210 00:06:00.764 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-06 14:46:09.625 00:00:10.366 TCP 23.104.0.1:34262 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:46:48.080 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55756 10 6452 1 2025-08-06 14:47:10.062 00:00:10.360 TCP 23.104.0.1:43700 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:47:48.287 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45696 10 6452 1 2025-08-06 14:48:10.464 00:00:10.366 TCP 23.104.0.1:51230 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:48:48.498 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38074 10 6452 1 2025-08-06 14:44:07.213 00:06:00.759 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-06 14:49:10.716 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 14:49:10.659 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 14:49:10.877 00:00:10.365 TCP 23.104.0.1:57370 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:49:48.714 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42470 10 6452 1 2025-08-06 14:50:11.280 00:00:10.366 TCP 23.104.0.1:56012 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:50:48.928 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47964 10 6452 1 2025-08-06 14:51:11.686 00:00:10.369 TCP 23.104.0.1:54580 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:51:49.152 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50228 10 6452 1 2025-08-06 14:52:12.105 00:00:10.362 TCP 23.104.0.1:37710 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:52:49.370 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38566 10 6452 1 2025-08-06 14:48:07.211 00:06:00.764 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-06 14:53:12.510 00:00:10.363 TCP 23.104.0.1:48088 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:53:49.582 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:53770 12 10365 1 2025-08-06 14:54:10.674 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 14:54:10.735 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 14:54:12.917 00:00:10.402 TCP 23.104.0.1:33546 -> 1.101.0.1:3000 15 1926 1 2025-08-06 14:54:49.836 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44038 10 6452 1 2025-08-06 14:55:13.362 00:00:10.367 TCP 23.104.0.1:49170 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:55:50.070 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51312 10 6452 1 2025-08-06 14:51:07.218 00:06:00.756 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-06 14:56:13.767 00:00:10.375 TCP 23.104.0.1:46894 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:56:50.286 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42744 10 6452 1 2025-08-06 14:57:14.183 00:00:10.328 TCP 23.104.0.1:55776 -> 1.101.0.1:3000 11 1507 1 2025-08-06 14:57:50.498 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36292 10 6452 1 2025-08-06 14:58:14.548 00:00:10.324 TCP 23.104.0.1:52200 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 504979, total packets: 1582, avg bps: 1063, avg pps: 0, avg bpp: 319 Time window: 2025-08-06 13:55:07 - 2025-08-06 14:58:24 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0009s User: 0.0026s Wall: 0.0015s flows/second: 106235.3 Runtime: 0.0015s